Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier: z9wE6vONPxQoTZACnhZWhk830894+QFJ+4s/TsHbYKA=
Subject key identifier: DA:F8:58:4C:57:6B:52:36:1A:D4:89:89:2A:83:D2:C6:54:7F:1F:A6
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 0194BBCEC31A71E725247F3842E6FF7AB354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number: 13A9
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: WNrwy5r9QmfvckuMh8XCCYZbOz7gjOnpK4e4dmevPyQ=)
2: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:1a:71:e7:25:24:7f:38:42:e6:ff:7a:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=daf8584c576b52361ad489892a83d2c6547f1fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:1c:32:a7:69:5c:b6:62:a8:bf:0b:80:3d:
1d:28:6a:a1:bd:a6:1c:37:5a:5a:46:ee:f3:1c:0e:
e7:64:f5:b1:47:5e:63:6d:c2:e6:90:5c:9b:69:dc:
a3:34:4c:2e:c0:cc:f5:4c:67:56:f8:75:35:ea:20:
8f:d1:40:17:cc:fb:97:b2:41:bb:28:08:6d:0a:29:
94:18:d6:d6:59:44:08:26:b3:75:72:ac:b7:68:48:
87:64:1f:a3:64:2a:d7:84:58:ae:03:bc:79:ca:b1:
ee:99:83:44:60:af:01:a6:ec:11:2b:6d:14:ca:c6:
51:be:94:c2:0c:3f:2a:c7:c5:ad:f2:ee:8b:1e:ec:
a9:8f:b9:44:6d:c4:52:49:66:e7:18:4e:f9:10:f5:
d6:37:a4:31:37:26:b1:39:dd:85:45:c6:94:4e:67:
d8:15:54:e7:97:5f:15:f5:fb:a2:d0:da:d4:99:c3:
1d:16:f6:57:51:90:76:c2:cc:83:71:d0:14:e1:fc:
1b:69:da:26:36:d1:ae:4f:6a:cc:5d:b2:aa:59:24:
1d:07:ac:4e:78:b4:4f:df:0f:ef:7a:f9:87:41:42:
56:51:da:92:d7:1d:03:27:9e:f3:d9:52:76:f1:5b:
8d:f1:90:b9:87:4e:b6:20:85:ce:41:36:c8:27:13:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:58:4C:57:6B:52:36:1A:D4:89:89:2A:83:D2:C6:54:7F:1F:A6
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:09:52:37:3e:97:da:b4:4d:55:13:30:fb:48:8a:f5:53:
e6:11:ed:3a:fa:c5:54:68:6c:f3:ac:99:95:ae:2e:1c:f6:6b:
71:4b:10:d4:38:44:0f:bd:e7:70:fe:21:53:82:34:8a:ee:7e:
c9:50:ea:31:bb:a9:bc:de:e5:68:aa:14:0f:ae:46:f1:81:94:
3c:c1:ab:fe:ff:3c:9c:46:2b:d6:57:5e:42:fa:a0:9e:1a:a3:
06:e0:8f:fd:14:3a:cd:b6:fe:51:84:63:b5:13:8a:57:f0:67:
48:33:78:e3:44:b0:b7:11:5d:74:31:f6:b6:8d:d4:42:45:c3:
00:1d:dd:f0:7d:6e:e0:d2:37:3a:6c:ee:f9:b2:1f:2a:d2:33:
12:0e:88:cb:31:d8:4d:76:87:80:e4:6a:54:32:19:bf:ee:c2:
62:fa:1a:00:dc:c3:2f:20:ec:e3:1b:e6:2d:c0:64:a5:a5:74:
aa:84:f7:7a:9b:5b:1a:83:54:51:67:12:43:81:3f:40:c3:e6:
c6:62:44:2b:f9:3a:db:1c:21:13:2a:a0:4c:4f:0f:e2:de:c3:
2c:8a:29:e8:2e:f8:dd:8d:5e:16:c3:1e:ce:3d:c5:b5:7c:b5:
62:ee:c6:2d:87:29:ba:4d:25:18:ca:98:02:9b:46:7f:60:68:
ce:94:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client